🟡 Medium ⏱ 15–45 min Last verified: 28 January 2022 Affected versions: IBM AIX 7.3 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2012-0723, IBM Support Bulletin CVE: CVE-2012-0723 NVD summary: The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which […]
🟡 Medium ⏱ 10–30 min Last verified: 28 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpdf — stack based buffer overflow Related CVEs: CVE-2004-1125 CVE-2005-0064 CVE-2007-3387 Upstream summary: The KDE Team reports: kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tflite — buffer overflow vulnerability Related CVEs: CVE-2021-37689 CVE-2022-41894 Upstream summary: Thibaut Goetghebuer-Planchon reports: The reference kernel of the CONV_3D_TRANSPOSE TensorFlow Lite operator wrongly increments the data_ptr when adding the […]
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying set up buildkite agent on centos stream 9 both straightforward and auditable. This tutorial covers the complete procedure for how to Set Up Buildkite Agent on CentOS Stream 9, including dnf module streams where applicable, systemd unit management, and the firewalld rules […]
🟡 Medium ⏱ 10–30 min Last verified: 28 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RDoc — command injection vulnerability Related CVEs: CVE-2012-6708 CVE-2015-9251 CVE-2021-31799 Upstream summary: Alexandr Savca reports: RDoc used to call Kernel#open to open a local file. If a Ruby project has […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1251 CVE-2019-19920 Upstream summary: Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hsftp format string vulnerabilities Upstream summary: Ulf Härnhammar discovered a format string bug in hsftp's file listing code may allow a malicious server to cause arbitrary code execution by the […]
Introduction This tutorial covers How to Install SaltStack on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh && […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:0776-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25316 Upstream summary: A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to […]
🟠 High ⏱ 15–60 min Last verified: 28 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-9421 Related CVEs: CVE-2021-3656 CVE-2021-3653 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
